commit 4f9054682f8dcf6aeaf02c4558bf251005d51b45 · pyrox.dev/nix

+12 -2
systems/x86_64-linux/prefect/services/fail2ban.nix
···

       14
       14
        
             postfix = {

     

       15
       15
        
               filter = "postfix";

     

       16
       16
        
               settings = {

     

       17
       17
       -
                 action = ''nftables[port="25,465,587"]'';

     

       17
       17
       +
                 action = "nftables";

     

       18
       18
       +
                 port = "143,993";

     

       18
       19
        
               };

     

       19
       20
        
             };

     

       20
       21
        
             dovecot = {

     

       21
       22
        
               filter = "dovecot";

     

       22
       23
        
               settings = {

     

       23
       23
       -
                 action = ''nftables[port="25,465,587"]'';

     

       24
       24
       +
                 action = "nftables";

     

       25
       25
       +
                 port = "25,465,587";

     

       24
       26
        
               };

     

       25
       27
        
             };

     

       28
       28
       +
             # I don't use SSHd right now, but if I do, re-enable this.

     

       29
       29
       +
             # sshd = {

     

       30
       30
       +
             #   filter = "sshd";

     

       31
       31
       +
             #   settings = {

     

       32
       32
       +
             #     action = "nftables";

     

       33
       33
       +
             #     port = "22";

     

       34
       34
       +
             #   };

     

       35
       35
       +
             # };

     

       26
       36
        
           };

     

       27
       37
        
         };

     

       28
       38
        
       }